Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-9087
HistoryDec 01, 2014 - 3:59 p.m.

CVE-2014-9087

2014-12-0115:59:00
CWE-191
[email protected]
web.nvd.nist.gov
42
cve
2014
9087
integer underflow
libksba
denial of service
crash
buffer overflow
nvd

6.4 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.5%

JSON

Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1) S/MIME message or (2) ECC based OpenPGP data, which triggers a buffer overflow.

Related

fedora 3
prion 1
nessus 10
openvas 10
debian 3
debiancve 1
securityvulns 2
osv 2
archlinux 2
ubuntu 1
ubuntucve 1
mageia 1
cvelist 1
ibm 2
fedora
fedora
[SECURITY] Fedora 20 Update: libksba-1.3.2-1.fc20
2014-12-06 02:33:55
[SECURITY] Fedora 19 Update: libksba-1.3.2-1.fc19
2014-12-07 04:38:37
[SECURITY] Fedora 21 Update: libksba-1.3.2-1.fc21
2014-12-06 10:32:27
prion
prion
Integer overflow
2014-12-01 15:59:00
nessus
nessus
Fedora 20 : libksba-1.3.2-1.fc20 (2014-15847)
2014-12-06 00:00:00
Fedora 19 : libksba-1.3.2-1.fc19 (2014-15838)
2014-12-07 00:00:00
openSUSE Security Update : libksba (openSUSE-SU-2014:1682-1)
2014-12-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0030-1)
2021-04-19 00:00:00
Mageia: Security Advisory (MGASA-2014-0498)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-3078-1)
2014-11-26 00:00:00
debian
debian
[SECURITY] [DSA 3078-1] libksba security update
2014-11-27 16:55:41
[SECURITY] [DSA 3078-1] libksba security update
2014-11-27 16:55:58
[SECURITY] [DLA 141-1] libksba security update
2015-01-28 23:06:06
debiancve
debiancve
CVE-2014-9087
2014-12-01 15:59:00
securityvulns
securityvulns
libksba buffer overflow
2014-11-30 00:00:00
[ MDVSA-2014:234 ] libksba
2014-11-30 00:00:00
osv
osv
libksba - security update
2015-01-29 00:00:00
libksba - security update
2014-11-27 00:00:00
archlinux
archlinux
gnupg: denial of service
2014-12-01 00:00:00
libksba: denial of service
2014-11-28 00:00:00
ubuntu
ubuntu
Libksba vulnerability
2014-11-27 00:00:00
ubuntucve
ubuntucve
CVE-2014-9087
2014-11-26 00:00:00
mageia
mageia
Updated libksba packages fix security vulnerability
2014-11-26 20:29:06
cvelist
cvelist
CVE-2014-9087
2014-12-01 15:00:00
ibm
ibm
Security Bulletin: Open Source GNU glibc vulnerabilities on IBM SONAS (CVE-2014-7817, CVE-2014-9087)
2018-06-18 00:09:22
Security Bulletin: Open Source GNU glibc vulnerabilities on IBM Storwize V7000 Unified (CVE-2014-7817, CVE-2014-9087)
2018-06-18 00:09:10

6.4 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.5%

JSON
Related for CVE-2014-9087
fedora3prion1nessus10openvas10debian3debiancve1securityvulns2osv2archlinux2ubuntu1ubuntucve1mageia1cvelist1ibm2